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In the Claims : 

1 . (Currently Amended) A method comprising: 

computing an authentication code using a first key and a second key within a 
responder, 

transmitting both said second key and said authentication code from said 
responder to an initiator using a first communication channel, after computing said 
authentication code, 

transmitting said first key from said responder to said initiator using a second 
communication channel, 

computing a verification code using said first key and said second key within said 
initiator, 

comparing said verification code with said authentication code within said 
initiator, and 

authenticating said responder as a correct communication partner if said 
comparing checks out, 

wherein said second key is a secret key and said first communication channel is 
a secure channel. 

2. (Previously Presented) The method of claim 1 , wherein the first key is generated 
within said responder. 

3. (Previously Presented) The method of claim 1 , wherein the second key is 
generated within said responder. 

4. (Previously Presented) The method of claim 1 , wherein in the transmitting of said 
second key and said authentication code, said second key and said authentication code 
are transmitted via a confidential or authenticated communication channel or both. 
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5. (Previously Presented) The method of claim 1 , wherein in the transmitting of said 
first key, said first key is transmitted via an open communication channel. 

6. (Previously Presented) The method of claim 1 , wherein said second key is 
composed of a first part and a second part and wherein said first part is used for 
computing said authentication code and said second part is used for calculating an 
authentication value. 

7. (Original) The method of claim 6, wherein said first part is an empty string and 
wherein said authentication code is calculated as an unkeyed hash code. 

8. (Original) The method of claim 1, wherein said authentication code and said 
verification code are computed using an algorithm to compute a short message 
authentication code. 

9. (Previously Presented) The method of claim 1 , wherein if the comparison of 
authentication code and verification code yields a difference, said initiator requests said 
responder to retransmit said first key. 

10. (Previously Presented) The method of claim 1 further comprising calculating an 
authentication value within said initiator using said second key. 

1 1 . (Original) The method of claim 1 0, wherein said authentication code is calculated 
using a pseudo random function. 

12. (Previously Presented) The method of claim 10, further comprising using said 
authentication value for authenticating messages that have been transmitted from said 
initiator to said responder, or vice versa. 

13. (Previously Presented) The method of claim 12, wherein the computing of an 
authentication code and the transmitting of said second key and said authentication 
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code are utilize pre-authentication messages, and wherein the transmitting of said first 
key and the using of said authentication value utilize internet key exchange protocol 
messages. 

14. (Currently Amended) A method comprising: 

computing an authentication code using a raw public key and a second key 
within a responder, 

transmitting both said second key and said authentication code from said 
responder to an initiator using a first communication channel, after computing said 
authentication code, 

transmitting said raw public key from said responder to said initiator within an 
encrypted certification payload using a second communication channel, 

extracting said raw public key fronri said encrypted certification payload, 

computing a verification code using said raw public key and said second key 
within said initiator, 

comparing said verification code with said authentication code within said 
initiator, and 

authenticating said responder as a correct communication partner if said 
comparing checks out, 

wherein said second key is a secret key and said first communication channel is 
a secure channel. 

15. (Previously Presented) The method of claim 14, wherein the first key is 
generated within said responder 

16. (Previously Presented) The method of claim 14, wherein the second key is 
generated within said responder. 

17. (Previously Presented) The method of claim 14, wherein the transmitting of said 
second key and said authentication code, said second key and said authentication code 
are transmitted via a confidential or authenticated communication channel or both. 
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18. (Previously Presented) The method of claim 14, wherein said second key is 
composed of a first part and a second part and wherein said first part is used for 
computing said authentication code and said second part is used for calculating an 
authentication value. 

19. (Original) The method of claim 14. wherein said first part is an empty string and 
wherein said authentication code is calculated as an unkeyed hash code. 

20. (Previously Presented) The method of claim 14, wherein in the transmitting of 
said raw public key, said encrypted certification payload comprising said raw public key 
is transmitted via an open communication channel. 

21. (Original) The method of claim 14, wherein said authentication code and said 
verification code are computed using an algorithm to compute a short message 
authentication code. 

22. (Previously Presented) The method of claim 14, wherein if the comparison of the 
authentication code and the verification code yields a difference, said initiator requests 
said responder to retransmit said certification payload. 

23. (Original) The method of claim 14, wherein in further steps for communicating the 
second key is used for authenticating the initiator to the responder. 

24. (Previously Presented) The method of claim 14, wherein the computing of an 
authentication code and the transmitting of said second key and said authentication 
code utilize pre-authentication messages and wherein the transmitting of said raw public 
key is utilizes an internet key exchange protocol with extended authentication protocol 
message. 
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25. (Currently Amended) A system for encrypting mossagos transmitted 
botw ee n comprisinq an initiator and a responder, 

wherein 

said responder comprises 

computing means for computing confiaured to compute an 
authentication code from a first key and a second key, 

first transmission means for transmitt i ng confiqured to transmit both 
said second key and said authentication code from said responder to said 
initiator using a first communication channel, after computing said 
authentication code, and 

second transmission means for transmitt i nq confiqured to transmit 
said first key from said responder to said initiator using a second 
communication channel, and wherein 
said initiator comprises 

first transmission means for roco i vinq configured to receive said 
second key and said authentication code from said responder via said first 
communication channel, 

second transmission means for rec e iving confiqured to receive said 
first key from said responder via said second communication channel, 

computing means confiqured to compute a verification code from 
said first key and said second key, and 

comparing means for comparinq confiqured to compare said 
verification code with said authentication code, 

wherein said second key is a secret key and said first communication 

channel is a secure channel. 

26. (Previously Presented) The system of claim 25, wherein said responder further 
comprises generating means for generating the first key or the second key or both. 
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27. (Previously Presented) The system of claim 25, wherein said first transmission 
means of said responder and said initiator allow communicating via a confidential or 
authenticated communication channel or both. 

28. (Previously Presented) The system of claim 25, wherein said second 
transmission means of said responder and said initiator allow communicating via 
an open communication channel. 

29. (Canceled) 

30. (Canceled) 

31 . (Previously Presented) The system of claim 25, wherein said initiator and said 
responder comprise operating means to be operated according to an internet key 
exchange protocol. 

32. (Canceled) 

33. (Currently Amended) A computer readable medium with a computer program 
stored thor e on w ith instructions operable to cause a processor to secure a 
communication between an initiator and a responder of said communication by: 

computing an authentication code using a first key and a second key within said 
responder, 

transmitting both said second key and said authentication code from said 
responder to said initiator using a first communication channel, after computing said 
authentication code, 

transmitting said first key from said responder to said initiator using a second 
communication channel, 

computing a verification code using said first key and said second key within said 
initiator, and 
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comparing said verification code with said authentication code within said 
Initiator, 

wherein said second key is a secret key and said first communication channel is 
a secure channel. 

34-39. (Canceled) 

40. (Currently Amended) The at l oaot ono computer readable medium of claim 33, 
wherein the communication is also secured by said initiator requesting said responder 
to retransmit said first key if the comparison of authentication code and verification code 
yields a difference. 

41-44. (Canceled) 

45. (Previously Presented) The method of claim 1 , wherein said computing the 
authentication code and said computing the verification code both use a message 
authentication code function of only two variables, said two variables being the first key 
and the second key. 
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